oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

kdc: audit armor client principal name

Browse Source
This commit is contained in:
Luke Howard
2021-12-19 18:24:38 +11:00
parent 2730e12b6a
commit 45ea54a44a
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
kdc/fast.c
View File

@@ -435,6 +435,7 @@ fast_unwrap_request(astgs_request_t r,
krb5_auth_context tgs_ac)
{
krb5_principal armor_server_principal = NULL;
char *armor_client_principal_name = NULL;
char *armor_server_principal_name = NULL;
PA_FX_FAST_REQUEST fxreq = {0};
krb5_auth_context ac = NULL;
@@ -581,6 +582,10 @@ fast_unwrap_request(astgs_request_t r,
ticket = tgs_ticket;
}
krb5_unparse_name(r->context, ticket->client, &armor_client_principal_name);
_kdc_audit_addkv((kdc_request_t)r, 0, "armor_client_name", "%s",
armor_client_principal_name ? armor_client_principal_name : "<unknown>");
if (ac->remote_subkey == NULL) {
krb5_auth_con_free(r->context, ac);
kdc_log(r->context, r->config, 2,
@@ -706,6 +711,7 @@ fast_unwrap_request(astgs_request_t r,
krb5_auth_con_free(r->context, ac);
krb5_free_principal(r->context, armor_server_principal);
krb5_xfree(armor_client_principal_name);
krb5_xfree(armor_server_principal_name);
free_KrbFastReq(&fastreq);